Allow socket pool size randomization for proxies
- Policy ID
- AllowSocketPoolSizeRandomizationForProxies
- Scope
- Computer Configuration, User Configuration
- Supported on
- Microsoft Edge version 150, Windows 7 or later
- Source
- Microsoft Edge Policy Templates (version 155.0.4283.45)
- Category
- Microsoft Edge
Description
Controls whether Microsoft Edge randomizes socket pool sizes for proxy connections.
Socket pool size randomization is a security mechanism that helps prevent attackers from using deterministic connection limits to infer cross-site information. For example, if the configured proxy socket pool limit is 128, Microsoft Edge can randomly set the effective limit between 128 and 256. This can allow up to twice as many proxy connections, though the expected increase is closer to 1.2x in practice.
This policy affects the limits configured by the 'MaxConnectionsPerProxy' (Maximum number of concurrent connections to the proxy server for non-WebSocket requests) and 'MaxConnectionsPerProxyForWebSocket' (Maximum number of concurrent connections to the proxy server for WebSocket requests) policies. When this policy is enabled, the effective upper limit can be randomized up to 2x the values configured by those policies.
If you enable this policy or don't configure it, Microsoft Edge enables socket pool size randomization for proxy connections.
If you disable this policy, Microsoft Edge disables socket pool size randomization for proxy connections. The values configured by 'MaxConnectionsPerProxy' and 'MaxConnectionsPerProxyForWebSocket' are used as the upper limits without randomization.
Registry
- AllowSocketPoolSizeRandomizationForProxiesREG_DWORD
- AllowSocketPoolSizeRandomizationForProxiesREG_DWORD